Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
File: zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft (raw, json)
Hash identifier: Zeyz3FFBxgpmFp6jGw5DQ2jBtfWX0mR/c4o/tjHOFxE=
Subject key identifier: 9D:D2:10:5B:17:5C:31:4C:F4:9A:F3:F6:CD:A7:B5:12:28:3B:F3:C6
Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
Certificate issuer: /CN=cdba6d5704fd290d0e073376eda688717564d196
Certificate serial: 0194BD854B264B0C3398D2D76EB4ADC12584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
Manifest number: 0AD1
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: FwAUcIE-PlUBJk-lyofvjIK4_Vk.roa (hash: 7pDJDV3PAprmagYY0WEztJ7b9H5DGoPcWbYIPWhc9l8=)
2: zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl (hash: s4bZIeSlPvTa1WcmWfLMTit5tVeT9Ukgj870kCD2luA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4b:26:4b:0c:33:98:d2:d7:6e:b4:ad:c1:25:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=9dd2105b175c314cf49af3f6cda7b512283bf3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:ba:92:b9:e3:36:f1:23:9e:f2:0e:5f:06:
aa:01:33:f5:60:6b:09:dc:4e:fb:51:ff:d8:47:68:
d1:09:0c:68:24:32:1d:3c:15:24:d9:f6:2b:36:76:
7a:00:30:3d:fc:7f:4e:89:50:20:14:46:8c:a1:e1:
01:80:40:d4:ed:f0:15:1f:fe:9a:7c:19:7b:28:c0:
00:28:49:4d:be:0c:3f:5d:62:7e:ac:9e:af:1b:7d:
c5:7c:42:7a:3c:5d:5e:6e:a9:e2:e1:bd:d9:77:0f:
2b:e3:23:08:38:be:db:30:81:54:93:e2:44:1e:25:
c6:fe:11:b0:88:73:3a:5e:4b:4c:26:51:87:fe:9f:
4d:50:00:a1:d0:b4:24:04:7f:be:01:3c:d2:49:86:
61:9c:36:7f:72:6d:2c:b7:f9:a4:8c:5c:97:1e:c9:
6b:9c:9e:7b:c7:a7:d0:cc:e1:c9:17:ac:37:c3:65:
ea:b3:4a:31:c8:d3:0f:5a:15:8e:0e:ca:fe:e2:87:
3a:aa:9b:9e:e2:17:0b:37:02:03:36:4a:e0:6f:e0:
95:23:01:60:c0:f3:75:86:5b:56:76:79:dd:7d:4f:
b2:ab:77:07:56:da:55:22:78:92:32:34:87:ff:da:
fc:d9:7d:48:3a:4a:ea:f5:e1:e3:53:1f:e4:e2:92:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D2:10:5B:17:5C:31:4C:F4:9A:F3:F6:CD:A7:B5:12:28:3B:F3:C6
X509v3 Authority Key Identifier:
keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b9:70:08:a3:34:29:52:5b:5f:08:f7:14:4b:33:71:9e:f8:
d3:ac:4e:90:18:5b:88:1d:6f:73:1e:c0:40:72:8a:1f:8f:0b:
30:43:c5:a5:2d:a5:5e:83:fb:c5:0f:fa:75:ec:c3:e9:e4:e4:
f5:9a:ac:36:1b:64:10:1e:60:2b:fd:84:65:a2:0e:e1:de:44:
63:7f:74:66:29:53:eb:63:b1:b4:a7:0d:6a:91:7b:43:9a:06:
c7:a5:9a:e9:51:20:0d:f5:12:81:08:7a:fc:e8:2a:e0:13:c4:
fc:b2:17:fe:ff:eb:dc:ad:4e:87:96:3a:6d:ac:9d:e0:42:f1:
24:31:33:67:34:85:ee:ec:1f:a8:be:6c:18:8d:bb:91:25:3e:
8a:34:33:f7:5b:93:5c:84:e1:58:7f:ee:78:a8:df:1b:2d:15:
d1:ec:8c:7e:81:fd:9a:c1:b0:97:88:88:9e:99:13:df:99:2c:
8b:55:bf:0b:36:b1:ec:f2:55:7d:e9:81:b7:c6:40:07:0b:cc:
25:31:2e:01:13:72:15:d6:ac:0b:28:d7:15:49:4a:81:c5:2a:
45:35:74:64:a1:ea:c6:2a:2b:d6:6a:ce:00:0c:37:71:2c:1f:
91:c9:86:8e:e3:87:0c:e3:fa:70:b0:fd:1e:d6:ae:77:ca:07:
ab:8b:21:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUsmSwwzmNLXbrStwSWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmE2ZDU3MDRmZDI5MGQwZTA3MzM3NmVkYTY4ODcxNzU2
NGQxOTYwHhcNMjUwMTMxMTgwMDE2WhcNMjUwMjAxMTgwMDE2WjAzMTEwLwYDVQQD
Eyg5ZGQyMTA1YjE3NWMzMTRjZjQ5YWYzZjZjZGE3YjUxMjI4M2JmM2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCC6krnjNvEjnvIOXwaqATP1YGsJ
3E77Uf/YR2jRCQxoJDIdPBUk2fYrNnZ6ADA9/H9OiVAgFEaMoeEBgEDU7fAVH/6a
fBl7KMAAKElNvgw/XWJ+rJ6vG33FfEJ6PF1ebqni4b3Zdw8r4yMIOL7bMIFUk+JE
HiXG/hGwiHM6XktMJlGH/p9NUACh0LQkBH++ATzSSYZhnDZ/cm0st/mkjFyXHslr
nJ57x6fQzOHJF6w3w2Xqs0oxyNMPWhWODsr+4oc6qpue4hcLNwIDNkrgb+CVIwFg
wPN1hltWdnndfU+yq3cHVtpVIniSMjSH/9r82X1IOkrq9eHjUx/k4pIlKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3SEFsXXDFM9Jrz9s2ntRIoO/PGMB8GA1UdIwQY
MBaAFM26bVcE/SkNDgczdu2miHF1ZNGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTkt
YTQ2MTE2OWYxZGMyLzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTktYTQ2MTE2OWYxZGMy
LzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7lwCKM0
KVJbXwj3FEszcZ7406xOkBhbiB1vcx7AQHKKH48LMEPFpS2lXoP7xQ/6dezD6eTk
9ZqsNhtkEB5gK/2EZaIO4d5EY390ZilT62OxtKcNapF7Q5oGx6Wa6VEgDfUSgQh6
/Ogq4BPE/LIX/v/r3K1Oh5Y6bayd4ELxJDEzZzSF7uwfqL5sGI27kSU+ijQz91uT
XIThWH/ueKjfGy0V0eyMfoH9msGwl4iInpkT35ksi1W/Czax7PJVfemBt8ZABwvM
JTEuARNyFdasCyjXFUlKgcUqRTV0ZKHqxior1mrOAAw3cSwfkcmGjuOHDOP6cLD9
Htaud8oHq4shGw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:22 2025 by rpki-client